OAuth 2.0 Implicit Flow Detector
Detect sites using the OAuth 2.0 implicit Flow The Implicit flow has been essentially deprecated due to security issues and should no longer be used.
What is OAuth 2.0 Implicit Flow Detector?
OAuth 2.0 Implicit Flow Detector is a Firefox add-on that detects websites using the OAuth and OIDC protocols to manage web authentication and authorization. It identifies when a website is using the deprecated Implicit Flow and promotes security consciousness for everyday web usage.
Detect sites using the OAuth/OpenID Connect Implicit Flow.
Many websites use the OAuth and OIDC protocols (https://developer.okta.com/blog/2017/06/21/what-the-heck-is-oauth) to manage web authentication and authorization.
While these standards are the best practice for web developers, many sites are still relying on the now deprecated Implicit flow (https://developer.okta.com/blog/2019/05/01/is-the-oauth-implicit-flow-dead) which isn't considered secure 🙁
This extension detects when a website is using the Implicit Flow and lets you know. It's a great way to stay conscious of the security of websites you use every day.
OAuth 2.0 Implicit Flow Detector is risky to use as it requires a number of sensitive permissions that can potentially harm your browser and steal your data. Exercise caution when installing this add-on. Review carefully before installing. We recommend that you only install OAuth 2.0 Implicit Flow Detector if you trust the publisher.
OAuth 2.0 Implicit Flow Detector has earned a fairly good reputation and likely can be trusted.